Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/323830343a333639343a383030303a3a2f33342d3334203d3e20323636333537.roa
File:                     323830343a333639343a383030303a3a2f33342d3334203d3e20323636333537.roa (raw, json)
Hash identifier:          ae10XJ/f4jeEMY0hCkc1q17vBSV00at53sHrf4Ncv60=
Subject key identifier:   1E:3B:A1:31:0D:49:21:9B:1B:6D:CD:52:F5:DE:49:DE:49:D6:29:8B
Certificate issuer:       /CN=A9A5DFB43987480BBB355C5728B68951A16DE5BE
Certificate serial:       7C009AD26DF3B58B7E3B0FCAA0130226C53C184F
Authority key identifier: A9:A5:DF:B4:39:87:48:0B:BB:35:5C:57:28:B6:89:51:A1:6D:E5:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/323830343a333639343a383030303a3a2f33342d3334203d3e20323636333537.roa
Signing time:             Tue 22 Sep 2026 20:12:57 +0000
ROA not before:           Tue 22 Sep 2026 20:07:57 +0000
ROA not after:            Tue 21 Sep 2027 20:12:57 +0000
asID:                     266357
IP address blocks:        2804:3694:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.crl
                          rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 19:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:00:9a:d2:6d:f3:b5:8b:7e:3b:0f:ca:a0:13:02:26:c5:3c:18:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A5DFB43987480BBB355C5728B68951A16DE5BE
        Validity
            Not Before: Sep 22 20:07:57 2026 GMT
            Not After : Sep 21 20:12:57 2027 GMT
        Subject: CN=1E3BA1310D49219B1B6DCD52F5DE49DE49D6298B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:c6:16:65:87:7c:f1:0e:c8:e5:c8:84:59:
                    b7:38:8b:9f:02:8e:a5:0b:32:4a:8c:09:a1:64:f2:
                    fc:fb:c1:52:bb:0a:07:a3:64:14:e7:e6:72:0d:8c:
                    31:68:2b:ad:0a:52:8a:e9:38:c4:7d:ba:dc:72:ae:
                    46:7a:bd:67:0f:2d:89:ee:5f:7a:09:be:09:75:d2:
                    01:b0:34:34:61:cb:be:06:10:14:d1:2b:14:53:2c:
                    71:f0:f1:a7:50:96:40:24:27:ce:b5:2b:c7:33:ec:
                    3d:30:a5:5d:78:8a:08:bb:f9:f0:d7:6b:a1:9f:6d:
                    a4:2e:dc:50:b8:c6:c7:9c:5f:d2:9c:a4:ae:94:20:
                    9c:a3:c1:9c:f9:eb:89:df:e0:67:41:a6:c8:69:a1:
                    79:df:58:f2:77:12:62:26:e4:1a:e1:70:61:93:b4:
                    5b:f6:09:ca:3d:54:a8:6b:8f:64:5c:d1:fb:f8:f0:
                    02:e1:53:69:35:19:08:10:4f:c8:f4:da:c2:5c:ea:
                    78:2c:cd:31:33:f0:d6:8c:93:81:da:53:b3:2d:bb:
                    18:41:a1:26:33:91:ea:14:a9:06:05:88:b0:f7:22:
                    77:ca:8f:7d:7a:92:c6:fb:db:21:04:12:b0:3f:78:
                    c3:6d:3e:67:a8:46:84:4e:1f:91:e7:6c:46:38:68:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3B:A1:31:0D:49:21:9B:1B:6D:CD:52:F5:DE:49:DE:49:D6:29:8B
            X509v3 Authority Key Identifier:
                keyid:A9:A5:DF:B4:39:87:48:0B:BB:35:5C:57:28:B6:89:51:A1:6D:E5:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/A9A5DFB43987480BBB355C5728B68951A16DE5BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A5DFB43987480BBB355C5728B68951A16DE5BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/0/323830343a333639343a383030303a3a2f33342d3334203d3e20323636333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3694:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:de:c4:ea:8e:e0:6b:1b:ad:40:8c:d7:a5:7d:ec:b6:40:26:
         77:a4:34:61:f4:23:46:fa:b1:48:a0:d7:53:f2:56:14:31:65:
         6d:0a:a8:ea:63:d0:56:12:f8:a6:52:66:60:b7:02:a7:14:11:
         3d:f5:3c:ce:4f:69:3c:0e:26:e7:64:c4:ed:47:79:a2:a3:ae:
         30:a2:96:97:1e:c5:de:a2:51:04:54:9c:fd:e0:62:de:68:4e:
         f4:eb:2e:0b:7d:14:c3:d0:a1:5e:37:8e:f2:2a:5c:c8:3f:32:
         8f:3c:8c:3f:d6:9a:20:48:17:e3:32:4a:82:08:73:74:77:47:
         16:85:c6:18:55:b7:26:b5:69:69:b8:c8:1a:58:ca:18:c2:31:
         07:bc:02:33:8f:27:9a:7e:c0:1e:d0:83:5b:61:ba:f1:da:f8:
         b4:79:d2:33:80:70:4a:49:24:12:22:13:18:5d:ef:aa:63:46:
         1d:17:46:c6:36:3b:4e:e8:a8:24:52:d7:d7:71:db:4b:74:64:
         d0:1f:5b:56:aa:5a:49:31:64:2e:c4:87:6b:27:cf:24:b1:42:
         7c:88:47:45:df:3a:f2:6c:7a:d2:6c:03:0c:20:35:19:22:67:
         2c:d7:47:35:fc:e3:4f:9c:cb:ab:73:44:17:56:61:5b:a4:b6:
         4d:d0:99:94
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfACa0m3ztYt+Ow/KoBMCJsU8GE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlBNURGQjQzOTg3NDgwQkJCMzU1QzU3MjhCNjg5NTFB
MTZERTVCRTAeFw0yNjA5MjIyMDA3NTdaFw0yNzA5MjEyMDEyNTdaMDMxMTAvBgNV
BAMTKDFFM0JBMTMxMEQ0OTIxOUIxQjZEQ0Q1MkY1REU0OURFNDlENjI5OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslMYWZYd88Q7I5ciEWbc4i58C
jqULMkqMCaFk8vz7wVK7CgejZBTn5nINjDFoK60KUorpOMR9utxyrkZ6vWcPLYnu
X3oJvgl10gGwNDRhy74GEBTRKxRTLHHw8adQlkAkJ861K8cz7D0wpV14igi7+fDX
a6GfbaQu3FC4xsecX9KcpK6UIJyjwZz564nf4GdBpshpoXnfWPJ3EmIm5BrhcGGT
tFv2Cco9VKhrj2Rc0fv48ALhU2k1GQgQT8j02sJc6ngszTEz8NaMk4HaU7MtuxhB
oSYzkeoUqQYFiLD3InfKj316ksb72yEEErA/eMNtPmeoRoROH5HnbEY4aIvTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUHjuhMQ1JIZsbbc1S9d5J3knWKYswHwYDVR0j
BBgwFoAUqaXftDmHSAu7NVxXKLaJUaFt5b4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkJtcDI1MkJia3B5UXYyeWFWUllWaDRpb3ZBcUFtVTYzVEM4R1o3NHJl
cjkvMC9BOUE1REZCNDM5ODc0ODBCQkIzNTVDNTcyOEI2ODk1MUExNkRFNUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5QTVERkI0Mzk4NzQ4MEJC
QjM1NUM1NzI4QjY4OTUxQTE2REU1QkUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCbXAyNTJCYmtweVF2MnlhVlJZVmg0aW92QXFBbVU2M1RDOEdaNzRyZXI5LzAv
MzIzODMwMzQzYTMzMzYzOTM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjMzMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigENpSAMA0GCSqGSIb3DQEBCwUA
A4IBAQA73sTqjuBrG61AjNelfey2QCZ3pDRh9CNG+rFIoNdT8lYUMWVtCqjqY9BW
EvimUmZgtwKnFBE99TzOT2k8DibnZMTtR3mio64wopaXHsXeolEEVJz94GLeaE70
6y4LfRTD0KFeN47yKlzIPzKPPIw/1pogSBfjMkqCCHN0d0cWhcYYVbcmtWlpuMga
WMoYwjEHvAIzjyeafsAe0INbYbrx2vi0edIzgHBKSSQSIhMYXe+qY0YdF0bGNjtO
6KgkUtfXcdtLdGTQH1tWqlpJMWQuxIdrJ88ksUJ8iEdF3zrybHrSbAMMIDUZImcs
10c1/ONPnMurc0QXVmFbpLZN0JmU
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:48 2026 by rpki-client